Your network contains an Active Directory domain named contoso.com.
An organizational unit (OU) named OU1 contains the computer accounts for laptops and
desktop computers.
A Group Policy object (GPO) named GP1 is linked to OU1.
You need to ensure that the configuration settings in GP1 are applied only to a user named
User1.
What should you do?
A.
Modify the security settings of OU1.
B.
Modify the GPO Status of GP1.
C.
Modify the security settings of GP1.
D.
Configure the WMI Filter of GP1.
Explanation:
Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 10:
Implementing Group Policy, p. 470, 482
http://technet.microsoft.com/en-us/library/jj134176
WMI filtering using GPMC
First: Secutity settings and Security Filtering are 2 different things
Second: OU contains only computer objects, so security filtering cant be used to apply GPO to User1 by default
Only way to filter GPO out to apply to User1 is to use WMI filter, something like: Select * win32_useraccount or Win32_logedonuser ….
0
0
WMI filtering
Windows Management Instrumentation (WMI) filters allow you to dynamically determine the scope of Group Policy objects (GPOs) based on attributes of the target computer.
The correct answer is: “C”
0
0
Give some explanation why it’s C?
How can you apply GPO to User1 modifying security settings?
0
0
So is it C or D?
And why?
0
0
In my opinion it’s C. within security settings remove authenticates users from the execute policy right and add only user1 to it.
0
0
bogey is definitely correct and that will work. A and B and C are definitely wrong. wmi filtering will only apply to a particular attribute of computers
0
0
This seems like a bit of a trick question, but that said, its definitely not WMI filtering. WMI filtering is to for example apply a setting to a computer that only has 8gb ram.
If you look at the other options i.e. A, B and D which are definitely incorrect, and so by process of elimination, it can only be C.
I think in this scenario, we have to assume that user 1 is in OU1, as the question does not say if user 1 is part of OU1 or not.
0
0
Answer C is correct, although the answer should say “modify the security filtering settings” as that is what that setting is used for.
0
0